First Author
First Author’s Address, typically department and university only
Only the first author’s e-mail address is used
Second Author
Second author’s address
Information systems development methods pay little attention to security aspects. While several alternative approaches for designing and managing secure information systems have been proposed; these lack fully comprehensive modeling schemes in terms of security. No single method covers all modeling needs. Rarely can these approaches be integrated into existing development methods. Also, these approaches constrain the autonomy of developers. This paper develops a framework that explains the limitations of the alternative secure information systems design approaches. We illustrate the normative value of this framework with a case study of a frameworkbased solution: meta-notation for adding security into information systems development methods.
Keywords: Choose keywords from the list provided in Scholar One when you submit your manuscript.
This box will only be used for peer-reviewed papers.
Volume 22
Volume 22, Article x, pp., January 2008
Article 15

2
The level one heading is just above. Note that it is preceded by a Roman numeral. Only the level one headings get any kind of number. It is Arial 12 point font. Please do not skip a line between the heading and the text. You are reading normal text format. Please do not use body text format. The normal text format is in Arial 10 point font.
When a paper is published, spacing is single. A line is skipped between paragraphs for clarity.
1 Please do not include any section breaks anywhere in the manuscript.
When you submit a manuscript for review, however, if you used this doc style sheet, please use double spacing to make it a little easier on your editors and reviewers.
For references in the text, use this guide.
1) Items included in the list of references should be referred to in text by author name and year within square brackets. a. Example: [Gray, 1997]
2) For two authors, show both names and year. Use ‘and’ rather than & a. Example: [Gray and Ein-Dor, 1998].
3) For more than two authors, show first name and et al. a. Example: [Gray et al., 1995]
4) If a given author published multiple papers in a given year, use a,b,c… to differentiate among papers a. Example: [Gray, 1992a]
Just above is the level two heading. It is in 11 point Arial font. Note that the level one heading is in all caps, while the level 2 heading is not. Also note that the level 2 heading is not numbered. Both the level 1 and 2 headings are in bold. Please do not skip a line between the heading and the text, and please do not skip a line between the preceding paragraph and the heading. In other words, do not skip a line before the heading or after the heading.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. Get the idea?
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. Get the idea?
Heading 3
Above is the level 3 heading. It is in 10 point Arial font. It is not bold. There should never be a reason for a level 4 heading, so we do not provide one. Please do not skip a line between the heading and the text.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. Get the idea?
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
1 Footnote text is tiny, only 8 point font. This style guide was created by Joey George in January 2008.
Volume 22 Article 15

Figures have their captions below, as in this example. Note that both the figure and its caption are centered. Notice that the caption is bold.
Figure 1: An example of a figure and its caption.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. More normal text would look like this.
More normal text would look like this. More normal text would look like this. Get the idea?
For tables, the caption comes above the table. In fact, in this new format (as of January 2008), the title should occupy the first row of the table, as in the example below. Note that the caption is bold and centered.
Table 1: Example of Table Appearance
TEL
CALL
1985
1991
2001
1985
1991
2001
1985
Mean
--
15.9
17.7
--
.1
.1
64.8
St.dev
--
14.0
11.5
--
.06
.09
20.3 URBAN
1991
2001
67.1
69.9
TEL = Average monthly telephone subscription cost;
CALL = Average cost of local call;
URBAN = Size of urban population, as a percentage of total population;
19.6
18.7
Please note: Due to the new format, CAIS will no longer publish tables in landscape orientation. There will be no exceptions. If your article has tables in landscape, the first thing you need to ask yourself is whether they are needed in the first place. If they are needed, then you will have to reorient them to portrait. Again, there will be no exceptions. Also note that we will not publish entire paragraphs in bold, like this one. I am only trying to call your attention to the new rules about table orientation.
If there are any acknowledgments, this is where they would go.
This section is taken directly from the original CAIS style sheet written by Paul Gray. The rules he established for references are still in effect. This section first describes the various components of individual references and then shows the order in which these components are put together.
If your article includes URLs, you should insert this notice at the beginning of the reference list:
Editor’s Note : The following reference list contains hyperlinks to World Wide Web pages. Readers who have the ability to access the Web directly from their word processor or are reading the paper on the Web, can gain direct access to these linked references. Readers are warned, however, that
1. these links existed as of the date of publication but are not guaranteed to be working thereafter.
2. the contents of Web pages may change over time. Where version information is provided in the
References, different versions may not contain the information or the conclusions referenced.
Volume 22 Article 15
3

4
3. the author(s) of the Web pages, not AIS, is (are) responsible for the accuracy of their content.
4. the author(s) of this article, not AIS, is (are) responsible for the accuracy of the URL and version information.
Author
Single Author: Last Name, First Initials.
Example: Smith, A.
Two Authors: Last Name, First initials, and First initials, Last Name
Example: Gray P. and P. Ein-Dor
Three or more authors: Last Name, First initials, followed by First initials, Last Name
Example: Gray, P., P. Ein-Dor, and A. G. Smith.
Four or more authors: Last name, First initials followed by et al.
Example: Gray, P. et al.
[NOT: Gray,P., P. Ein-Dor, S. Neumann, and L. Olfman]
Note: When listing multiple authors, use “and”, not &
Year of Publication
Single publication in year: (year)
Example: (1996)
Multiple publications in year by same author(s): (year followed by sequence letter)
Example: (1997a)
Title
Book: Initial Capitals and italics
Example: Wealth of Nations
Journal Article: “Initial Capitals Enclosed in Quotes”
Example: “The Demand for Telecommuting”
Publisher
Book: Location: Name of Publisher
Example: Upper Saddle River, NJ: Prentice-Hall
Journal: Name of Journal, volume, issue number, and pages
Journal name is in italics with initial capitals, followed by volume number in parenthesis, issue number or month, and then pages on which the article appears.
Example: IEEE Computer (25)3, pp. 256-267.
Edited Book
Entire book: Show name of editor followed by (ed.)
Example: Gray, P. (ed.)
Or (eds.) for multiple editors
Example: P. Gray and J. Jurison (eds.)
Article in Edited book: Show name of author and title as for journal article, followed by ‘in’, the name of the editor(ed.), and then the name of the book. Note the example is incomplete. See below for full specifications, which include publisher and pages:
Example: Bikson, T.K. “Groupware in the World Bank” in C.U. Ciborra (ed.) Groupware & Teamwork …
Electronic Publications
Author name and pape r title as for journal articles, followed by the URL and date of referenced version. URL’s can be shown in 10 point type if they are long.
Example: Burka, L. P. (1995) "A Hypertext History of Multiuser Dimen- sions", MUD History, http://www.ccs.neu.edu/home/home/lpb/mud-history.html
(current Dec. 5,1995).
Personal Communication
Name of Source (date), Personal Communication
Example: W.R. King (June 1997), Personal Communication
Volume 22 Article 15

Full references are single spaced, with lines after the first one indented by 5 spaces.
To achieve this indented format, use the Paragraph format in Word. Select Special: Hanging
Book
The format is: Single Space, Hanging: Author(s) (date) Title in Italics, edition in italics (if appropriate), Place of
Publication: Publisher, pages(if appropriate)
Example:
McNurlin, B.C. and R.H. Sprague (1998) Information Systems Management in Practice , 6th edition , Upper Saddle
River, NJ: Prentice Hall pp. 133-170. (Note that this reference uses the reference style in the style sheet.
In fact, all the full references below use the reference style in the style sheet.)
Journal or Magazine Article
The format is: Single Space, Hanging: Author(s) (date) “Title”, Journal Name in Italics, (Volume) Issue, pages
Examples:
Lee, O. and P. Gray (1998) “Knowledge Base Clustering in KBS Maintenance”, Journal of Software Maintenance,
(10)2, pp. 395-414
Sambamurthy, V. and W. W. Chin (1994) "The Effects of Group Attitudes toward Alternative GDSS Designs on the
Decision-making Performance of Computer-Supported Groups", Decision Science (25)2, pp. 215-239.
Edited Book
The format is: Single Space, Hanging: Editors(s) (ed.) (date) Title in Italics, Publication: Publisher, pages (if appropriate)
Example:
Coleman, D. and R. Kanna (eds.) (1995) Groupware Technology and Applications , Upper Saddle River, NJ: Prentice
Hall PTR.
Article in Edited Book
The format is: Single Space, Hanging: Authors(s) (date) “Title of Article” in Editor name(ed.) Title in Italics, Place of
Publication: Publisher, pages
Example:
Nunamaker, J.F., R.O. Briggs, D.D. Mittleman (1995) “Electronic Meeting Systems: Ten Years of Lessons Learned” in Coleman, D. and R. Kanna (eds.) Groupware Technology and Application s, Upper Saddle River, NJ:
Prentice Hall PTR, pp. 146-193.
Newspaper or Magazine Article
Author(s) (year) “Title of Article”, Name of Newspaper or Magazine in Italics, date, pages.
For newspapers and magazines, the year should be put in parenthesis after the name of the author. The exact date
(but not the year) should be given after the name of the publication.
Example:
Brown, J. (1997) "Who, When, Why?" The New York Times , April 15, p. B3
After the references come appendices, if necessary. Each appendix should have its own title, in Heading 1 format.
There is no need to separate appendices with section breaks. Sometimes, if needed, there may also be a list of acronyms and their meanings.
After the references , and the appendices if there are any, come short biographical sketches of the authors. They should be in normal text format, with only the authors’ names in bold, at the start of the sketch. All journal names listed should be italicized. The sketch should be no more than 150 words long.
Volume 22 Article 15
5

6
CAIS uses the following guidelines to create articles that are easy to read and understand.
CAIS tries to avoid words that contain little meaning or are hyperbole, imprecise, or colloquial. Table A1 shows some examples:
Word
Dramatic
Table A1. Bad Words
Discussion
Hyperbole. Use large, significant, major
Exponential
Utilize
Recent, Recently
Players
Effectively and efficiently
(used together)
Gigantic
Reveals, revealed
According to
In the year 20xx
Arena
Meaningless since exponent is not defined.
Use is sufficient
CAIS is a journal of record. When the article is read several years from now, the information is no longer recent. Preferable to give date
Colloquial.
Unfortunately, few examples exist where both effectively and efficiently are true simultaneously. They usually involve some tradeoff.
Hyperbole. Give a number
Reveals is hyperbole that comes out of the press and out of mystery novels. Usually, shows is a good alternative.
A form of journalistic writing. Replace with reference style.
Example: the second version is preferred:
According to Jones [2002], the original mouse was round.
The original mouse was round [Jones 2002].
Sufficient to say 20xx. Example: The second version is preferred:
The number of users increased in the year 2003.
The number of users increased in 2003.
Colloquial when used as a way of specifying a field (e.g., the investment arena)
CAIS uses the active rather than the passive voice. In active voice, the subject that does the action appears first, whereas in passive voice the result of the action appears first. Thus, for example,
“Traces of spyware were found by the software” should be replaced by “The software found traces of spyware”
“The new ERP system was installed successfully” should be replaced by “Computer operators successfully installed the new ERP systems”
In English, the perfect tenses (past, present, and future) require has, had, or have. Although widely used, the results in dull, academic sounding prose that often puts readers to sleep. Often, these words are combined with passive voice to create even duller text. Therefore, avoid constructions involving has, have, had unless absolutely necessary.
Example: Delete has from “The business philosophy itself has changed”
Volume 22 Article 15

Example: The following sentence uses has and is passive voice. “The availability of video on the Internet has resulted in increased offerings of online courses.” Change to: “Online course offerings increased because video became available.”
When used without an antecedent, the words ‘this’ and ‘these’ are often difficult to understand. CAIS therefore explains what these words point to.
EXAMPLE: This phenomenon results in …. rather than:
This res ults in…
When listing a number of items in text, put a comma before the ‘and’.
EXAMPLE: Red, white, and blue rather than:
Red, white and blue
Starting sentences with “there is” or “there are” should be avoided. For example, “There is no empirical evidence concerning what practitioners actually do.” can be written as: “No empirical evidence shows what practitioners actually do.”
Split Infinitives
CAIS tries to avoid split infinitives.
Example: “to critically examine the merits…” should be written “to examine the merits critically ,,,,
Long Sentences
CAIS tries to avoid overly long sentences. Such sentences are usually difficult to read and tend to become convoluted.
Run-On Sentences
Avoid runon sentences (usually two sentences connected into one by the use of and). Example: “This document follows the AIS Publication Style and can be downloaded from http:\\ cais.isworld.org.” should be replaced by: “This document follows the CAIS Publication Style. It can be downloaded from http:\\ cais.isworld.org. “
Being an international journal, CAIS follows English usage in the authors’ country. Thus, whilst, bespoke, and similar words are perfectly all right as are spellings such as traveller.
Copyright © 2008 by the Association for Information Systems. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and full citation on the first page. Copyright for components of this work owned by others than the Association for Information Systems must be honored.
Abstracting with credit is permitted. To copy otherwise, to republish, to post on servers, or to redistribute to lists requires prior specific permission and/or fee. Request permission to publish from: AIS Administrative Office, P.O.
Box 2712 Atlanta, GA, 30301-2712 Attn: Reprints or via e-mail from
Volume 22 Article 15
7